CompTIA Security+ (SY0-701) — Question 249

Which of the following data roles is responsible for identifying risks and appropriate access to data?

Answer options

• A. Owner
• B. Custodian
• C. Steward
• D. Controller

Correct answer: A

Explanation

The Owner is responsible for identifying risks and determining who has access to the data, making them the correct answer. The Custodian manages the data according to the Owner's guidelines but does not identify risks. The Steward ensures data quality and compliance but isn't focused on access risks, while the Controller typically oversees data protection but is not specifically tasked with access rights.